$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: Qq4bsbn8mjb6TUviRh3161IToUyEvj4vi8/+W2PD6yw= Subject key identifier: 5A:20:5F:E8:48:80:8E:06:B2:5E:75:D8:52:36:90:7D:43:BB:77:2D Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 0540C35D383ED70289ABC67AE2F5F88F15E41B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: F7 Signing time: Fri 06 Mar 2026 06:33:22 +0000 Manifest this update: Fri 06 Mar 2026 06:28:22 +0000 Manifest next update: Mon 09 Mar 2026 13:44:22 +0000 Files and hashes: 1: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) 2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) 3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: K0Nktt3SGA3B8XnROc+LnViqYsn/yTnPueOQkjrtiD0=) 4: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:40:c3:5d:38:3e:d7:02:89:ab:c6:7a:e2:f5:f8:8f:15:e4:1b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Mar 6 06:28:22 2026 GMT Not After : Mar 9 13:44:22 2026 GMT Subject: CN=5A205FE848808E06B25E75D85236907D43BB772D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ae:e3:c9:a9:0a:ea:a9:15:e5:64:82:7d:d1: 4a:71:98:08:cf:2c:07:85:f7:a6:26:d4:d6:66:12: ce:93:bb:98:63:94:c6:04:cf:8f:e4:2b:f9:30:44: 2c:5c:71:ad:39:58:e6:b5:42:b1:c8:ea:50:81:89: e5:99:8e:aa:65:62:3d:3d:88:7a:dc:08:92:61:86: f7:6b:c3:39:56:32:ec:c7:c4:4d:03:a6:3d:a8:fb: b3:a5:e8:3b:8e:44:7e:1d:5d:a3:46:d7:2f:31:c1: 2f:29:5e:66:a2:d3:43:3f:10:56:e0:94:e9:85:60: 24:cc:e3:77:aa:0e:cf:24:58:25:b7:e1:8d:f2:8f: 8d:0b:55:39:87:f4:a0:67:f8:6a:c7:9f:7f:10:81: 74:d3:35:32:67:45:c0:36:24:e1:6f:32:af:e9:ea: 79:b8:3b:77:1b:83:66:5b:92:1b:eb:d7:0a:6d:28: cc:59:ee:e9:24:9b:ef:f2:b3:f1:0f:20:12:5e:a3: 5c:33:49:11:82:6e:95:5c:85:4b:33:05:bd:b4:8e: f4:66:ef:82:48:fc:45:e1:e8:4b:8a:a4:15:86:16: ab:9c:69:94:89:4d:b9:06:3b:82:f7:c5:50:8a:8a: 86:92:bd:44:a6:b2:b3:72:b8:91:0b:f7:c8:f7:6e: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:20:5F:E8:48:80:8E:06:B2:5E:75:D8:52:36:90:7D:43:BB:77:2D X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c8:d7:40:0f:48:6d:f0:20:6e:8e:3b:3f:5e:2f:1e:85:de: 22:2b:86:9a:c0:06:cc:b8:f4:24:65:29:37:bd:6a:a5:d9:b2: 65:e3:d7:8b:1d:ea:bb:ab:61:f2:f7:59:ab:d8:1e:24:41:ff: d1:7b:ff:6b:33:5c:82:33:52:0d:43:85:68:90:30:0f:37:43: 49:4f:aa:b4:fd:2f:25:18:b0:17:cc:63:78:ae:c4:9e:8b:ec: f7:67:64:05:ba:17:fe:b1:15:6c:81:97:ba:f2:b6:0f:99:d6: 67:23:e4:1e:f4:de:cd:ab:2b:c1:e2:54:2a:64:e0:cf:d3:9b: 71:0f:0e:e1:b4:bb:4c:25:e3:9b:8d:f7:48:33:f1:6d:e8:1f: 1e:48:30:64:7d:2c:16:9a:db:ef:d2:35:98:90:7b:4d:2c:9f: 03:52:fa:98:71:58:9f:0c:09:ae:b6:45:81:88:75:14:b4:b3: 8a:df:6d:30:b6:9f:60:ca:0c:e4:5d:fa:39:2e:6a:7e:be:4e: 53:e9:4b:61:c2:0e:f7:6f:f4:b9:22:f7:e8:c8:3c:6c:62:a1: 03:32:f0:f4:e5:fe:cf:83:ca:f2:1a:a9:11:58:e4:27:f7:6e: d1:a5:d7:38:14:1a:71:57:1a:d8:8b:30:f3:37:1b:a0:b7:72: fe:be:b3:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUDDXTg+1wKJq8Z64vX4jxXkGzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNjAzMDYwNjI4MjJaFw0yNjAzMDkxMzQ0MjJaMDMxMTAvBgNV BAMTKDVBMjA1RkU4NDg4MDhFMDZCMjVFNzVEODUyMzY5MDdENDNCQjc3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyruPJqQrqqRXlZIJ90UpxmAjP LAeF96Ym1NZmEs6Tu5hjlMYEz4/kK/kwRCxcca05WOa1QrHI6lCBieWZjqplYj09 iHrcCJJhhvdrwzlWMuzHxE0Dpj2o+7Ol6DuORH4dXaNG1y8xwS8pXmai00M/EFbg lOmFYCTM43eqDs8kWCW34Y3yj40LVTmH9KBn+GrHn38QgXTTNTJnRcA2JOFvMq/p 6nm4O3cbg2Zbkhvr1wptKMxZ7ukkm+/ys/EPIBJeo1wzSRGCbpVchUszBb20jvRm 74JI/EXh6EuKpBWGFqucaZSJTbkGO4L3xVCKioaSvUSmsrNyuJEL98j3btfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiBf6EiAjgayXnXYUjaQfUO7dy0wHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTI10APSG3wIG6OOz9eLx6F3iIrhprABsy4 9CRlKTe9aqXZsmXj14sd6rurYfL3WavYHiRB/9F7/2szXIIzUg1DhWiQMA83Q0lP qrT9LyUYsBfMY3iuxJ6L7PdnZAW6F/6xFWyBl7rytg+Z1mcj5B703s2rK8HiVCpk 4M/Tm3EPDuG0u0wl45uN90gz8W3oHx5IMGR9LBaa2+/SNZiQe00snwNS+phxWJ8M Ca62RYGIdRS0s4rfbTC2n2DKDORd+jkuan6+TlPpS2HCDvdv9Lki9+jIPGxioQMy 8PTl/s+DyvIaqRFY5Cf3btGl1zgUGnFXGtiLMPM3G6C3cv6+s0U= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:30 2026 by rpki-client